NSE4 · Question #159
Which of the following statements are true regarding Local User Authentication? (Select all that apply.)
The correct answer is A. Local user authentication is based on usernames and passwords stored locally on the FortiGate B. Two-factor authentication can be enabled on a per user basis. C. Administrators can create an account for the user locally and specify the remote server to verify. Local user authentication on a FortiGate involves credentials stored directly on the device, allows per-user two-factor authentication, and can integrate with remote servers for verification while maintaining a local account.
Question
Which of the following statements are true regarding Local User Authentication? (Select all that apply.)
Options
- ALocal user authentication is based on usernames and passwords stored locally on the FortiGate
- BTwo-factor authentication can be enabled on a per user basis.
- CAdministrators can create an account for the user locally and specify the remote server to verify
- DLocal users are for administration accounts only and cannot be used for identity policies.
How the community answered
(19 responses)- A89% (17)
- D11% (2)
Why each option
Local user authentication on a FortiGate involves credentials stored directly on the device, allows per-user two-factor authentication, and can integrate with remote servers for verification while maintaining a local account.
Local user authentication uses usernames and passwords stored directly within the FortiGate's configuration database, bypassing external authentication servers for primary credential storage.
FortiGate allows granular control, enabling administrators to configure two-factor authentication for individual local users as needed, providing flexible security based on user requirements.
FortiGate supports hybrid authentication where a local user account is created, but its credentials (or a primary authentication factor) are verified against a remote server (e.g., LDAP, RADIUS), enabling centralized user management with local policy enforcement.
Local users can be used for both administration accounts and for identity-based firewall policies to control user access to network resources, making this statement false.
Concept tested: FortiGate local user authentication capabilities
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/33923/user-authentication-concepts
Topics
Community Discussion
No community discussion yet for this question.